CVE-2025-31223 is a memory corruption vulnerability in Apple Safari caused by processing maliciously crafted web content. The flaw was addressed by Apple through improved input validation and checks, with patches released in Safari 18.5 and corresponding OS versions. The vulnerability has a CVSS v3.1 score of 8.0, indicating high severity with network attack vector, low attack complexity, requiring low privileges and user interaction, and impacts confidentiality, integrity, and availability. Red Hat's advisory indicates related fixes in the WebKitGTK+ package for Red Hat Enterprise Linux 7 Extended Lifecycle Support, addressing similar issues in the web rendering engine. The vendor advisory confirms the availability of official fixes.

Successful exploitation of this vulnerability may lead to memory corruption, which can result in arbitrary code execution, data disclosure, or denial of service in affected Safari browsers and related Apple platforms. The CVSS score of 8.0 reflects a high impact on confidentiality, integrity, and availability. There are no known exploits in the wild currently.

Official patches are available from Apple in Safari 18.5, iOS 18.5, iPadOS 18.5, macOS Sequoia 15.5, tvOS 18.5, visionOS 2.5, and watchOS 11.5. Users and administrators should update to these versions to remediate the vulnerability. For Red Hat Enterprise Linux 7 Extended Lifecycle Support users, update the webkitgtk4 package to version 2.50.0-1.el7_9 or later as provided in the Red Hat advisory RHSA-2025:19352. No additional mitigation actions are indicated by the vendor advisories.